$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: Or3K3RQ4edg6s2Log9e6jtvmawQeXFmxyb4re7kp768= Subject key identifier: A6:68:C0:56:6F:3E:A4:6E:5E:7F:82:69:F6:D0:CC:7D:DB:E7:65:B3 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 0115 Signing time: Fri 31 May 2024 06:05:40 +0000 Manifest this update: Fri 31 May 2024 06:05:40 +0000 Manifest next update: Fri 07 Jun 2024 06:05:40 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: NuLP9MKJehbxDY6U8891hJiOOgHjROzHIWJsM09kIzc=) 2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: ORL7FHyYLhjfJDRD1dwarcJ8totXTOHWHFx2ct/UEgg=) 3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: xteyM1ldAXrwafcfzmBqJmUUzlYunq+2AYhyMDtlM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: May 31 06:05:40 2024 GMT Not After : Jun 7 06:05:40 2024 GMT Subject: CN=665968b4-5661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:58:d1:25:4f:0f:d2:44:8f:52:40:07:c6: bd:7a:3e:31:f7:62:1b:ec:e5:4b:fd:49:31:3f:d1: 49:72:68:5d:35:36:e2:1a:b4:00:3c:72:08:f0:00: 89:9c:4d:cf:de:d2:07:a8:66:95:ce:c0:d6:20:1c: cd:06:f8:45:98:0b:3f:b8:d3:c7:58:7a:1e:e1:29: 40:a5:0e:c9:4f:e7:63:1d:be:86:8d:07:e9:0a:90: 84:f3:8f:a0:c8:3a:53:73:6d:46:ab:f7:18:9e:59: c6:bb:66:e3:c5:a8:90:2f:4f:58:4e:24:e7:15:5f: 9c:05:34:97:b5:89:70:a9:51:86:23:a7:64:82:9a: 5d:67:7e:a6:a5:0b:0d:a7:91:8a:fa:2a:f0:af:b6: c6:5d:59:8c:32:05:c7:74:39:3d:3b:8e:06:29:75: a7:9c:d5:94:ab:97:8f:d3:af:93:c9:00:a1:8d:38: 8f:8b:91:75:a4:34:06:8c:50:b2:c3:19:c8:ef:a0: 2f:02:c0:79:bc:d7:f4:bc:99:1c:0a:85:35:f0:8f: 7e:9d:86:18:b6:84:6a:79:42:9f:03:43:d3:05:0b: 44:53:3a:7d:92:09:3b:dc:23:97:4c:c7:08:fd:b9: e3:64:8d:12:73:33:7a:f5:72:8e:61:cb:ba:9f:98: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:C0:56:6F:3E:A4:6E:5E:7F:82:69:F6:D0:CC:7D:DB:E7:65:B3 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0d:b0:3c:6a:1c:2a:19:45:99:f2:a4:a3:65:b3:b4:e0:0d: 11:5d:1b:95:9d:57:9d:a4:7f:77:eb:f2:0a:58:82:00:aa:71: 1d:e6:9e:0c:d9:a9:d1:fe:cc:5d:b4:81:e9:c3:2f:47:9d:4b: d6:e0:d4:c9:21:59:11:57:ad:7f:f5:8d:a8:24:9f:4c:15:55: fa:98:c9:2e:37:22:19:49:92:93:ea:2e:20:1b:67:1c:33:3c: 46:c3:46:78:0b:7d:69:08:b6:2f:f6:92:3d:ef:d9:1b:b9:4e: 78:80:58:5f:79:a5:d6:db:35:c4:9d:23:d4:12:12:40:7f:04: fb:6b:24:43:2c:b6:39:81:44:ac:4d:55:f0:a0:ef:0e:17:16: b4:39:49:8e:c9:1c:64:38:fa:be:9d:a0:94:96:fd:b5:d0:5f: 35:2b:60:11:b5:e8:9d:6c:f1:53:18:53:41:92:95:b2:c9:04: ee:9a:be:fe:49:6e:f3:d0:70:7f:91:c7:52:0c:1b:9f:8e:51: f4:95:0f:9b:ce:14:be:be:c0:4d:d4:15:c0:ab:66:dc:78:4d: 85:d2:46:76:06:2d:98:71:8c:16:27:3d:72:74:47:96:f2:b4: 18:db:6c:29:ad:7e:f6:03:e4:0c:41:95:df:42:90:65:b8:e4: c7:a6:9f:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjQwNTMxMDYwNTQwWhcNMjQwNjA3MDYwNTQwWjAYMRYwFAYD VQQDEw02NjU5NjhiNC01NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqktY0SVPD9JEj1JAB8a9ej4x92Ib7OVL/UkxP9FJcmhdNTbiGrQAPHII8ACJ nE3P3tIHqGaVzsDWIBzNBvhFmAs/uNPHWHoe4SlApQ7JT+djHb6GjQfpCpCE84+g yDpTc21Gq/cYnlnGu2bjxaiQL09YTiTnFV+cBTSXtYlwqVGGI6dkgppdZ36mpQsN p5GK+irwr7bGXVmMMgXHdDk9O44GKXWnnNWUq5eP06+TyQChjTiPi5F1pDQGjFCy wxnI76AvAsB5vNf0vJkcCoU18I9+nYYYtoRqeUKfA0PTBQtEUzp9kgk73COXTMcI /bnjZI0SczN69XKOYcu6n5jpWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZowFZv PqRuXn+CafbQzH3b52WzMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArDbA8ahwqGUWZ8qSjZbO04A0RXRuVnVedpH936/IKWIIAqnEd5p4M 2anR/sxdtIHpwy9HnUvW4NTJIVkRV61/9Y2oJJ9MFVX6mMkuNyIZSZKT6i4gG2cc MzxGw0Z4C31pCLYv9pI979kbuU54gFhfeaXW2zXEnSPUEhJAfwT7ayRDLLY5gUSs TVXwoO8OFxa0OUmOyRxkOPq+naCUlv210F81K2ARteidbPFTGFNBkpWyyQTumr7+ SW7z0HB/kcdSDBufjlH0lQ+bzhS+vsBN1BXAq2bceE2F0kZ2Bi2YcYwWJz1ydEeW 8rQY22wprX72A+QMQZXfQpBluOTHpp85 -----END CERTIFICATE-----Generated at Fri May 31 06:49:21 2024 by rpki-client on console-ams.rpki-client.org